Skip to content

Commit

Permalink
cargo update: addresses 'cargo audit' error regarding RUSTSEC-2024-00…
Browse files Browse the repository at this point in the history
…03 (#6)

$ cargo audit
    Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 604 security advisories (from /home/mark-despain/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (251 crate dependencies)
Crate:     h2
Version:   0.3.21
Title:     Resource exhaustion vulnerability in h2 may lead to Denial of Service (DoS)
Date:      2024-01-17
ID:        RUSTSEC-2024-0003
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0003
Solution:  Upgrade to ^0.3.24 OR >=0.4.2
Dependency tree:
h2 0.3.21
├── reqwest 0.11.22
│   └── oidc-authorizer 0.0.4
└── hyper 0.14.27
    ├── reqwest 0.11.22
    ├── lambda_runtime_api_client 0.8.0
    │   └── lambda_runtime 0.8.2
    │       └── oidc-authorizer 0.0.4
    ├── lambda_runtime 0.8.2
    ├── hyper-rustls 0.24.1
    │   └── reqwest 0.11.22
    └── httpmock 0.6.8
        └── oidc-authorizer 0.0.4

error: 1 vulnerability found!

Co-authored-by: Mark DeSpain <mark.despain@woven-planet.global>
  • Loading branch information
markdespain and Mark DeSpain authored Feb 22, 2024
1 parent 8c6fe5a commit 2bc030c
Showing 1 changed file with 587 additions and 358 deletions.
Loading

0 comments on commit 2bc030c

Please sign in to comment.